CCNA Security v3.0

Question

1.Which NAT type allows only objects or groups to reference an IP address?

Answer 1

A. Dynamic NAT

Answer 2

B. Dynamic PAT

Answer 3

C. Identity NAT

Answer 4

D. Static NAT

Answer 5

A. ARP poisoning

Answer 6

B. Physically modify the network gateway

Answer 7

C. Can access most network devices

Answer 8

D. Protect the identity of the attacker by masking their DHCP address

Answer 9

E. Man-in-the-middle attack

Answer 10

F. Modify traffic in transit

Answer 11

A. Static NAT with shortest prefix

Answer 12

B. Static NAT with longest prefix

Answer 13

C. Dynamic NAT with shortest prefix

Answer 14

D. Dynamic NAT with longest prefix

Answer 15

A. It forwards email requests to an external signature engine

Answer 16

B. It scans inbound email messages for known bad URLs

Answer 17

C. It sends an alert to the administrator to verify suspicious email messages

Answer 18

D. It sends the traffic through a file policy

Answer 19

A. Configure a single zone pair that allows bidirectional traffic flows from any zone except the self-zone

Answer 20

B. Configure two zone pairs, one for each direction

Answer 21

C. Configure a single zone pair that allows bidirectional traffic flows from any zone

Answer 22

D. Configure a single zone pair that allows bidirectional traffic flows only if the source zone is the less secure zone

Answer 23

A. An MD5 hash

Answer 24

B. A public/private key pair

Answer 25

C. An RSA nonce

Answer 26

D. Shared secret keys

Answer 27

A. Each privilege level is independent of all other privilege levels

Answer 28

B. Each privilege level supports the commands at its own level and all levels above it

Answer 29

C. Privilege-level commands are set explicitly for each user

Answer 30

D. Each privilege level supports the commands at its own level and all levels below it

Answer 31

A. Social activism

Answer 32

B. Targeted malware

Answer 33

C. Drive-by spyware

Answer 34

D. Polymorphic virus

Answer 35

E. Advanced persistent threat

Answer 36

A. Unicast IPv6 traffic from a higher security interface to a lower security interface is permitted in transparent mode only

Answer 37

B. Only BPDUs from a higher security interface to a lower security interface are permitted in routed mode

Answer 38

C. Unicast IPv4 traffic from a higher security interface to a lower security interface is permitted in routed mode only

Answer 39

D. Only BPDUs from a higher security interface to a lower security interface are permitted in transparent mode

Answer 40

E. ARPs in both directions are permitted in transparent mode only

Answer 41

A. It configures encryption to use MD5 HMAC

Answer 42

B. It configures authentication to use MD5 HMAC

Answer 43

C. It configures encryption to use AES-256

Answer 44

D. It configured authentication to use AES-256

Answer 45

E. It configures authorization to use AES-256

Answer 46

A. Extended access lists should be placed as near as possible to the destination

Answer 47

B. Standard access lists should be placed as near as possible to the source

Answer 48

C. Extended access lists should be placed as near as possible to the source

Answer 49

D. Standard access lists should be placed as near as possible to the destination

Answer 50

E. Standard access lists filter on the source address

Answer 51

F. Standard access lists filter on the destination address

Answer 52

A. When a network device fails to forward packets

Answer 53

B. When management applications need concurrent access to the device

Answer 54

C. When you require administrator access from multiple locations

Answer 55

D. When you require ROMMON access

Answer 56

E. When the control plane fails to respond

Answer 57

A. When a network device fails to forward packets

Answer 58

B. When management applications need concurrent access to the device

Answer 59

C. When you require administrator access from multiple locations

Answer 60

D. When you require ROMMON access

Answer 61

E. When the control plane fails to respond

Answer 62

A. ip ospf authentication message-digest

Answer 63

B. network 192.168.10.0 0.0.0.255 area 0

Answer 64

C. area 20 authentication message-digest

Answer 65

D. ip ospf message-digest-key 1 md5 CCNA

Answer 66

A. catalyst1(config)#username user1 privilege 0 secret us1pass

Answer 67

B. catalyst1(config)#username user1 privilege 1 secret us1pass

Answer 68

C. catalyst1(config)#username user1 privilege 2 secret us1pass

Answer 69

D. catalyst1(config)#username user1 privilege 5 secret us1pass

Answer 70

A. Interface

Answer 71

B. process

Answer 72

A. ip ospf authentication message-digest

Answer 73

B. network 192.168.10.0 0.0.0.255 area 0

Answer 74

C. area 20 authentication message-digest

Answer 75

D. ip ospf message-digest-key 1 md5 CCNA

Answer 76

A. Interface statements (OSPF, EIGRP) must be configured; use of key chain in OSPF

Answer 77

B. Router process (OSPF, EIGRP) must be configured; key chain in EIGRP

Answer 78

C. Router process (only for OSPF) must be configured; key chain in EIGRP

Answer 79

D. Router process (only for OSPF) must be configured; key chain in OSPF

Answer 80

A. SYN-RCVD

Answer 81

C. SYN-WAIT

Answer 82

A. Gaining access to a building through an unlocked door.

Answer 83

B. something about inserting a random flash drive.

Answer 84

C. gaining access to server room by posing as IT

Answer 85

D. Watching other user put in username and password (something around there)

Siguiente

CCNA Security v3.0

Descripción

Resumen del Recurso

Pregunta 1

Pregunta 2

Pregunta 3

Pregunta 4

Pregunta 5

Pregunta 6

Pregunta 7

Pregunta 8

Pregunta 9

Pregunta 10

Pregunta 11

Pregunta 12

Pregunta 13

Pregunta 14

Pregunta 15

Pregunta 16

Pregunta 17

Pregunta 18

Pregunta 19

Pregunta 20

Similar

	Creado por Mohamed Yuosef hace alrededor de 7 años